Vergleich editpost.php - 1.8.6 - 1.8.19

  Keine Änderungen   Hinzugefügt   Modifiziert   Entfernt
Zeile 11Zeile 11
define("IN_MYBB", 1);
define('THIS_SCRIPT', 'editpost.php');


define("IN_MYBB", 1);
define('THIS_SCRIPT', 'editpost.php');


$templatelist = "editpost,previewpost,changeuserbox,codebuttons,smilieinsert,smilieinsert_getmore,smilieinsert_smilie,smilieinsert_smilie_empty,post_attachments_attachment_postinsert,post_attachments_attachment_mod_unapprove,postbit_attachments_thumbnails";
$templatelist .= ",editpost_delete,error_attacherror,forumdisplay_password_wrongpass,forumdisplay_password,editpost_reason,post_attachments_attachment_remove,post_attachments_update,post_subscription_method,postbit_online,postbit_away";
$templatelist .= ",postbit_avatar,postbit_find,postbit_pm,postbit_rep_button,postbit_www,postbit_email,postbit_reputation,postbit_warn,postbit_warninglevel,postbit_author_user,postbit_icon,postbit_userstar,postbit_offline,postbit_attachments_images";
$templatelist .= ",postbit_signature,postbit_classic,postbit,postbit_attachments_thumbnails_thumbnail,postbit_attachments_images_image,postbit_attachments_attachment,postbit_attachments_attachment_unapproved,post_attachments_update,postbit_attachments";
$templatelist .= ",posticons_icon,post_prefixselect_prefix,post_prefixselect_single,newthread_postpoll,editpost_disablesmilies,post_attachments_attachment_mod_approve,post_attachments_attachment_unapproved,post_attachments_new,postbit_gotopost";
$templatelist .= ",postbit_warninglevel_formatted,postbit_reputation_formatted_link,editpost_disablesmilies_hidden,attachment_icon,post_attachments_attachment,post_attachments_add,post_attachments,posticons,global_moderation_notice";


$templatelist = "editpost,previewpost,changeuserbox,codebuttons,post_attachments_attachment_postinsert,post_attachments_attachment_mod_unapprove,postbit_attachments_thumbnails,postbit_profilefield_multiselect_value";
$templatelist .= ",editpost_delete,forumdisplay_password_wrongpass,forumdisplay_password,editpost_reason,post_attachments_attachment_remove,post_attachments_update,post_subscription_method,postbit_profilefield_multiselect";
$templatelist .= ",postbit_avatar,postbit_find,postbit_pm,postbit_rep_button,postbit_www,postbit_email,postbit_reputation,postbit_warn,postbit_warninglevel,postbit_author_user,posticons";
$templatelist .= ",postbit_signature,postbit_classic,postbit,postbit_attachments_thumbnails_thumbnail,postbit_attachments_images_image,postbit_attachments_attachment,postbit_attachments_attachment_unapproved";
$templatelist .= ",posticons_icon,post_prefixselect_prefix,post_prefixselect_single,newthread_postpoll,editpost_disablesmilies,post_attachments_attachment_mod_approve,post_attachments_attachment_unapproved";
$templatelist .= ",postbit_warninglevel_formatted,postbit_reputation_formatted_link,editpost_signature,attachment_icon,post_attachments_attachment,post_attachments_add,post_attachments,editpost_postoptions";
$templatelist .= ",postbit_attachments_images,global_moderation_notice,post_attachments_new,postbit_attachments,postbit_online,postbit_away,postbit_offline,postbit_gotopost,postbit_userstar,postbit_icon";


require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
require_once MYBB_ROOT."inc/functions_upload.php";


require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
require_once MYBB_ROOT."inc/functions_upload.php";

 
require_once MYBB_ROOT."inc/class_parser.php";
$parser = new postParser;


// Load global language phrases
$lang->load("editpost");


// Load global language phrases
$lang->load("editpost");

Zeile 46Zeile 49
	$post = get_post($pid);
}


	$post = get_post($pid);
}


if(!$post)

if(!$post || ($post['visible'] == -1 && $mybb->input['action'] != "restorepost"))

{
error($lang->error_invalidpost);
}

{
error($lang->error_invalidpost);
}

Zeile 60Zeile 63
	error($lang->error_invalidthread);
}


	error($lang->error_invalidthread);
}


$thread['subject'] = htmlspecialchars_uni($thread['subject']);

$thread['subject'] = htmlspecialchars_uni($parser->parse_badwords($thread['subject']));


// Get forum info
$fid = $post['fid'];


// Get forum info
$fid = $post['fid'];

Zeile 182Zeile 185

if((empty($_POST) && empty($_FILES)) && $mybb->get_input('processed', MyBB::INPUT_INT) == '1')
{


if((empty($_POST) && empty($_FILES)) && $mybb->get_input('processed', MyBB::INPUT_INT) == '1')
{

	error($lang->error_cannot_upload_php_post);

	error($lang->error_empty_post_input);

}

$attacherror = '';

}

$attacherror = '';

Zeile 191Zeile 194
	// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));


	// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));


	// If there's an attachment, check it and upload it
if($_FILES['attachment']['size'] > 0 && $forumpermissions['canpostattachments'] != 0)

	if($pid)


	{

	{

		$query = $db->simple_select("attachments", "aid", "filename='".$db->escape_string($_FILES['attachment']['name'])."' AND pid='{$pid}'");
$updateattach = $db->fetch_field($query, "aid");

$update_attachment = false;
if($updateattach > 0 && $mybb->get_input('updateattachment') && ($mybb->usergroup['caneditattachments'] || $forumpermissions['caneditattachments']))
{
$update_attachment = true;
}
$attachedfile = upload_attachment($_FILES['attachment'], $update_attachment);
}
if(!empty($attachedfile['error']))






		$attachwhere = "pid='{$pid}'";
}
else
{
$attachwhere = "posthash='".$db->escape_string($mybb->get_input('posthash'))."'";
}

$ret = add_attachments($pid, $forumpermissions, $attachwhere, "editpost");

if(!empty($ret['errors']))
{
$errors = $ret['errors'];
}

// Do we have attachment errors?
if(!empty($errors))

	{

	{

		eval("\$attacherror = \"".$templates->get("error_attacherror")."\";");
$mybb->input['action'] = "editpost";

		$attacherror = inline_error($errors);


	}

	}

 

// If we were dealing with an attachment but didn't click 'Update Post', force the post edit page again.

	if(!isset($mybb->input['submit']))
{
$mybb->input['action'] = "editpost";

	if(!isset($mybb->input['submit']))
{
$mybb->input['action'] = "editpost";

Zeile 291Zeile 299
					header("Content-type: application/json; charset={$lang->settings['charset']}");
if(is_moderator($fid, "canviewdeleted"))
{

					header("Content-type: application/json; charset={$lang->settings['charset']}");
if(is_moderator($fid, "canviewdeleted"))
{

						echo json_encode(array("data" => '1'));

						echo json_encode(array("data" => '1', "first" => '1'));

					}
else
{

					}
else
{

Zeile 346Zeile 354
					header("Content-type: application/json; charset={$lang->settings['charset']}");
if(is_moderator($fid, "canviewdeleted"))
{

					header("Content-type: application/json; charset={$lang->settings['charset']}");
if(is_moderator($fid, "canviewdeleted"))
{

						echo json_encode(array("data" => '1'));

						echo json_encode(array("data" => '1', "first" => '0'));

					}
else
{

					}
else
{

Zeile 371Zeile 379
}

if($mybb->input['action'] == "restorepost" && $mybb->request_method == "post")

}

if($mybb->input['action'] == "restorepost" && $mybb->request_method == "post")

{

{

	// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));


	// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));


Zeile 401Zeile 409
				$moderation = new Moderation;
$moderation->restore_threads(array($tid));
log_moderator_action($modlogdata, $lang->thread_restored);

				$moderation = new Moderation;
$moderation->restore_threads(array($tid));
log_moderator_action($modlogdata, $lang->thread_restored);

				if($mybb->input['ajax'] == 1)
{
header("Content-type: application/json; charset={$lang->settings['charset']}");
echo json_encode(array("data" => '1'));
}

				if($mybb->input['ajax'] == 1)
{
header("Content-type: application/json; charset={$lang->settings['charset']}");
echo json_encode(array("data" => '1', "first" => '1'));
}

				else
{
redirect(get_forum_link($fid), $lang->redirect_threadrestored);

				else
{
redirect(get_forum_link($fid), $lang->redirect_threadrestored);

				}
}
else
{
error_no_permission();
}
}

				}
}
else
{
error_no_permission();
}
}

		else
{
if(is_moderator($fid, "canrestoreposts"))

		else
{
if(is_moderator($fid, "canrestoreposts"))

Zeile 426Zeile 434
				$moderation->restore_posts(array($pid));
log_moderator_action($modlogdata, $lang->post_restored);
$redirect = get_post_link($pid, $tid)."#pid{$pid}";

				$moderation->restore_posts(array($pid));
log_moderator_action($modlogdata, $lang->post_restored);
$redirect = get_post_link($pid, $tid)."#pid{$pid}";





				if($mybb->input['ajax'] == 1)
{
header("Content-type: application/json; charset={$lang->settings['charset']}");

				if($mybb->input['ajax'] == 1)
{
header("Content-type: application/json; charset={$lang->settings['charset']}");

					echo json_encode(array("data" => '1'));

					echo json_encode(array("data" => '1', "first" => '0'));

				}
else
{

				}
else
{

Zeile 460Zeile 468
	require_once MYBB_ROOT."inc/datahandlers/post.php";
$posthandler = new PostDataHandler("update");
$posthandler->action = "post";

	require_once MYBB_ROOT."inc/datahandlers/post.php";
$posthandler = new PostDataHandler("update");
$posthandler->action = "post";





	// Set the post data that came from the input to the $post array.
$post = array(
"pid" => $mybb->input['pid'],

	// Set the post data that came from the input to the $post array.
$post = array(
"pid" => $mybb->input['pid'],

Zeile 513Zeile 521

// Help keep our attachments table clean.
$db->delete_query("attachments", "filename='' OR filesize<1");


// Help keep our attachments table clean.
$db->delete_query("attachments", "filename='' OR filesize<1");





		// Did the user choose to post a poll? Redirect them to the poll posting page.
if($mybb->get_input('postpoll', MyBB::INPUT_INT) && $forumpermissions['canpostpolls'])
{

		// Did the user choose to post a poll? Redirect them to the poll posting page.
if($mybb->get_input('postpoll', MyBB::INPUT_INT) && $forumpermissions['canpostpolls'])
{

Zeile 546Zeile 554
if(!$mybb->input['action'] || $mybb->input['action'] == "editpost")
{
$plugins->run_hooks("editpost_action_start");

if(!$mybb->input['action'] || $mybb->input['action'] == "editpost")
{
$plugins->run_hooks("editpost_action_start");





	if(!isset($mybb->input['previewpost']))

	if(!isset($mybb->input['previewpost']))

	{

	{

		$icon = $post['icon'];

		$icon = $post['icon'];

	}


	}


	if($forum['allowpicons'] != 0)
{
$posticons = get_post_icons();

	if($forum['allowpicons'] != 0)
{
$posticons = get_post_icons();

	}



	}

$mybb->user['username'] = htmlspecialchars_uni($mybb->user['username']);

	eval("\$loginbox = \"".$templates->get("changeuserbox")."\";");

$deletebox = '';

	eval("\$loginbox = \"".$templates->get("changeuserbox")."\";");

$deletebox = '';

Zeile 632Zeile 641
		if($mybb->settings['maxattachments'] == 0 || ($mybb->settings['maxattachments'] != 0 && $attachcount < $mybb->settings['maxattachments']) && !$noshowattach)
{
eval("\$attach_add_options = \"".$templates->get("post_attachments_add")."\";");

		if($mybb->settings['maxattachments'] == 0 || ($mybb->settings['maxattachments'] != 0 && $attachcount < $mybb->settings['maxattachments']) && !$noshowattach)
{
eval("\$attach_add_options = \"".$templates->get("post_attachments_add")."\";");

		}

		}


if(($mybb->usergroup['caneditattachments'] || $forumpermissions['caneditattachments']) && $attachcount > 0)
{


if(($mybb->usergroup['caneditattachments'] || $forumpermissions['caneditattachments']) && $attachcount > 0)
{

Zeile 663Zeile 672
		$post_errors = '';
}


		$post_errors = '';
}


	$postoptions_subscriptionmethod_dont = $postoptions_subscriptionmethod_none = $postoptions_subscriptionmethod_email = $postoptions_subscriptionmethod_pm = '';

	$subscribe = $nonesubscribe = $emailsubscribe = $pmsubscribe = '';

	$postoptionschecked = array('signature' => '', 'disablesmilies' => '');

if(!empty($mybb->input['previewpost']) || $post_errors)

	$postoptionschecked = array('signature' => '', 'disablesmilies' => '');

if(!empty($mybb->input['previewpost']) || $post_errors)

Zeile 680Zeile 689
			"subject" => $mybb->get_input('subject'),
"icon" => $mybb->get_input('icon', MyBB::INPUT_INT),
"uid" => $post['uid'],

			"subject" => $mybb->get_input('subject'),
"icon" => $mybb->get_input('icon', MyBB::INPUT_INT),
"uid" => $post['uid'],

 
			"username" => $post['username'],

			"edit_uid" => $mybb->user['uid'],
"message" => $mybb->get_input('message'),
);

			"edit_uid" => $mybb->user['uid'],
"message" => $mybb->get_input('message'),
);

Zeile 727Zeile 737
			if(isset($postoptions['signature']) && $postoptions['signature'] == 1)
{
$postoptionschecked['signature'] = " checked=\"checked\"";

			if(isset($postoptions['signature']) && $postoptions['signature'] == 1)
{
$postoptionschecked['signature'] = " checked=\"checked\"";

			}

if(isset($postoptions['subscriptionmethod']) && $postoptions['subscriptionmethod'] == "none")
{
$postoptions_subscriptionmethod_none = "checked=\"checked\"";
}
else if(isset($postoptions['subscriptionmethod']) && $postoptions['subscriptionmethod'] == "email")
{
$postoptions_subscriptionmethod_email = "checked=\"checked\"";
}
else if(isset($postoptions['subscriptionmethod']) && $postoptions['subscriptionmethod'] == "pm")
{
$postoptions_subscriptionmethod_pm = "checked=\"checked\"";
}
else
{
$postoptions_subscriptionmethod_dont = "checked=\"checked\"";

 
			}

if(isset($postoptions['disablesmilies']) && $postoptions['disablesmilies'] == 1)
{
$postoptionschecked['disablesmilies'] = " checked=\"checked\"";
}

			}

if(isset($postoptions['disablesmilies']) && $postoptions['disablesmilies'] == 1)
{
$postoptionschecked['disablesmilies'] = " checked=\"checked\"";
}

 
			
$subscription_method = get_subscription_method($tid, $postoptions);
${$subscription_method.'subscribe'} = "checked=\"checked\" ";

		}
}


		}
}


Zeile 784Zeile 780
		if(!isset($postoptions['disablesmilies']))
{
$postoptions['disablesmilies'] = 0;

		if(!isset($postoptions['disablesmilies']))
{
$postoptions['disablesmilies'] = 0;

		}


		}


		// Set the values of the post info array.
$postinfo['message'] = $previewmessage;
$postinfo['subject'] = $previewsubject;

		// Set the values of the post info array.
$postinfo['message'] = $previewmessage;
$postinfo['subject'] = $previewsubject;

Zeile 794Zeile 790

$postbit = build_postbit($postinfo, 1);
eval("\$preview = \"".$templates->get("previewpost")."\";");


$postbit = build_postbit($postinfo, 1);
eval("\$preview = \"".$templates->get("previewpost")."\";");

	}

	}

	else if(!$post_errors)
{
$message = htmlspecialchars_uni($message);

	else if(!$post_errors)
{
$message = htmlspecialchars_uni($message);

Zeile 812Zeile 808
			$postoptionschecked['disablesmilies'] = " checked=\"checked\"";
}


			$postoptionschecked['disablesmilies'] = " checked=\"checked\"";
}


		$query = $db->simple_select("threadsubscriptions", "notification", "tid='{$tid}' AND uid='{$mybb->user['uid']}'");
if($db->num_rows($query) > 0)
{
$notification = $db->fetch_field($query, 'notification');

if($notification == 0)
{
$postoptions_subscriptionmethod_none = "checked=\"checked\"";
}
else if($notification == 1)
{
$postoptions_subscriptionmethod_email = "checked=\"checked\"";
}
else if($notification == 2)
{
$postoptions_subscriptionmethod_pm = "checked=\"checked\"";
}
else
{
$postoptions_subscriptionmethod_dont = "checked=\"checked\"";
}
}

		$subscription_method = get_subscription_method($tid, $postoptions);
${$subscription_method.'subscribe'} = "checked=\"checked\" ";





















	}

// Generate thread prefix selector if this is the first post of the thread

	}

// Generate thread prefix selector if this is the first post of the thread

Zeile 842Zeile 818
		if(!$mybb->get_input('threadprefix', MyBB::INPUT_INT))
{
$mybb->input['threadprefix'] = $thread['prefix'];

		if(!$mybb->get_input('threadprefix', MyBB::INPUT_INT))
{
$mybb->input['threadprefix'] = $thread['prefix'];

		}

$prefixselect = build_prefix_select($forum['fid'], $mybb->get_input('threadprefix', MyBB::INPUT_INT));
}
else

		}

$prefixselect = build_prefix_select($forum['fid'], $mybb->get_input('threadprefix', MyBB::INPUT_INT), 0, $thread['prefix']);
}
else

	{
$prefixselect = "";
}

	{
$prefixselect = "";
}

Zeile 862Zeile 838
	{
$bgcolor = "trow1";
$bgcolor2 = "trow2";

	{
$bgcolor = "trow1";
$bgcolor2 = "trow2";

	}

	}


// Fetch subscription select box
eval("\$subscriptionmethod = \"".$templates->get("post_subscription_method")."\";");


// Fetch subscription select box
eval("\$subscriptionmethod = \"".$templates->get("post_subscription_method")."\";");





	$query = $db->simple_select("posts", "*", "tid='{$tid}'", array("limit" => 1, "order_by" => "dateline", "order_dir" => "asc"));
$firstcheck = $db->fetch_array($query);

$time = TIME_NOW;
if($firstcheck['pid'] == $pid && $forumpermissions['canpostpolls'] != 0 && $thread['poll'] < 1 && (is_moderator($fid, "canmanagepolls") || $thread['dateline'] > ($time-($mybb->settings['polltimelimit']*60*60)) || $mybb->settings['polltimelimit'] == 0))

	$query = $db->simple_select("posts", "*", "tid='{$tid}'", array("limit" => 1, "order_by" => "dateline", "order_dir" => "asc"));
$firstcheck = $db->fetch_array($query);

$time = TIME_NOW;
if($firstcheck['pid'] == $pid && $forumpermissions['canpostpolls'] != 0 && $thread['poll'] < 1 && (is_moderator($fid, "canmanagepolls") || $thread['dateline'] > ($time-($mybb->settings['polltimelimit']*60*60)) || $mybb->settings['polltimelimit'] == 0))

	{

	{

		$lang->max_options = $lang->sprintf($lang->max_options, $mybb->settings['maxpolloptions']);
$numpolloptions = $mybb->get_input('numpolloptions', MyBB::INPUT_INT);
$postpollchecked = '';

		$lang->max_options = $lang->sprintf($lang->max_options, $mybb->settings['maxpolloptions']);
$numpolloptions = $mybb->get_input('numpolloptions', MyBB::INPUT_INT);
$postpollchecked = '';

Zeile 892Zeile 868
	else
{
$pollbox = '';

	else
{
$pollbox = '';

	}








	}

// Hide signature option if no permission
$signature = '';
if($mybb->usergroup['canusesig'] == 1 && !$mybb->user['suspendsignature'])
{
eval("\$signature = \"".$templates->get('editpost_signature')."\";");
}


// Can we disable smilies or are they disabled already?
$disablesmilies = '';
if($forum['allowsmilies'] != 0)
{
eval("\$disablesmilies = \"".$templates->get("editpost_disablesmilies")."\";");


// Can we disable smilies or are they disabled already?
$disablesmilies = '';
if($forum['allowsmilies'] != 0)
{
eval("\$disablesmilies = \"".$templates->get("editpost_disablesmilies")."\";");

	}
else
{
eval("\$disablesmilies = \"".$templates->get("editpost_disablesmilies_hidden")."\";");
}



	}

$postoptions = '';
if(!empty($signature) || !empty($disablesmilies))
{
eval("\$postoptions = \"".$templates->get("editpost_postoptions")."\";");
}


$moderation_notice = '';
if(!is_moderator($forum['fid'], "canapproveunapproveattachs"))


$moderation_notice = '';
if(!is_moderator($forum['fid'], "canapproveunapproveattachs"))

Zeile 911Zeile 896
		if($forumpermissions['modattachments'] == 1  && $forumpermissions['canpostattachments'] != 0)
{
$moderation_text = $lang->moderation_forum_attachments;

		if($forumpermissions['modattachments'] == 1  && $forumpermissions['canpostattachments'] != 0)
{
$moderation_text = $lang->moderation_forum_attachments;

			eval('$moderation_notice = "'.$templates->get('global_moderation_notice').'";');
}
}

			eval('$moderation_notice = "'.$templates->get('global_moderation_notice').'";');
}
}


if(!is_moderator($forum['fid'], "canapproveunapproveposts"))


if(!is_moderator($forum['fid'], "canapproveunapproveposts"))

	{

	{

		if($forumpermissions['mod_edit_posts'] == 1)
{
$moderation_text = $lang->moderation_forum_edits;
eval('$moderation_notice = "'.$templates->get('global_moderation_notice').'";');
}
}

		if($forumpermissions['mod_edit_posts'] == 1)
{
$moderation_text = $lang->moderation_forum_edits;
eval('$moderation_notice = "'.$templates->get('global_moderation_notice').'";');
}
}

 

$php_max_upload_filesize = return_bytes(ini_get('max_upload_filesize'));
$php_post_max_size = return_bytes(ini_get('post_max_size'));

if ($php_max_upload_filesize != 0 && $php_post_max_size != 0)
{
$php_max_upload_size = min($php_max_upload_filesize, $php_post_max_size);
}
else
{
$php_max_upload_size = max($php_max_upload_filesize, $php_post_max_size);
}

$php_max_file_uploads = (int)ini_get('max_file_uploads');
eval("\$post_javascript = \"".$templates->get("post_javascript")."\";");


$plugins->run_hooks("editpost_end");



$plugins->run_hooks("editpost_end");